Riskcovery

CVE-2026-4017

Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety

State
Published
Severity
7.4 High
Published
Jul 14, 2026
Updated
Jul 14, 2026
Reserved
Mar 11, 2026

Read the record on cve.org

Description

Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.

Scores

CVSSScoreVectorSource
3.17.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hblackberry

Weaknesses

  • CWE-121 Stack-based buffer overflow

Affected Products

ProductVersions
QNX Software Development PlatformBlackBerry Ltd
  • 7.1Affected
  • cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*Affected
  • 7.0Affected
  • cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*Affected
QNX OS for SafetyBlackBerry Ltd
  • 2.2.8 and earlierAffected
  • cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:*Affected
  • 2.1.5 and earlierAffected
  • cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:*Affected
  • 2.0.3 and earlierAffected
  • cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:*Affected
QNX OS for MedicalBlackBerry Ltd.
  • 2.0.2 and earlierAffected
  • cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:*Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.